*Smacks forehead* I didn't need to check that script. I just checked my cookie stealer that I used for realistic 11 and tried to look at the source and the only thing that was there was the html for the ads lol. I see what you mean now. Can't believe I didn't realize that from the beginning . Well back to trying to crack the password for Hellbound's javascript mission 16.

I got it though. Just took a while for the bruter I wrote in javascript to find a collision lol. Really only program I could write it in though. Just learning VB right now and don't know enough about it to write one there and don't know any other languages really. I plan on learning more though. At first I just wanted to get into straight programming or software engineering but I think I might like site security more after coming to this site and Hellbound. I definitely need to learn more about SQL and php though (Edit:and perl too now that I look at extBasic 8, python and several others probably wouldn't be a bad idea either lol, I just need to figure out which others and where to use them) and keep supplementing what I do know of html and javascript (which really isn't all that much but more than about the previous 2). How everything interacts and finding out what you can do and what you can't (and finding workarounds for what you can't do ) is a lot of fun.

My 2 cents hint:Find the bug (it's a trivial one, but the kind that you tend to miss again and again) so you'll know which line to edit, then find the vuln on this line. Then the vuln is easy to fix but there are quite a lot of ways to do it, and only one (or a few?) is accepted... so just try a few of the most simple (shortest) fixes and you should end up on the accepted one.